// AWS / NFTABLES

AWS · nftables

nftables ruleset for AWS CIDRs. 16,259 CIDRs, refreshed daily.

// nftables_aws_allow.conf

DOWNLOAD ↓ ·

# Aws IP Ranges
# Updated: 2026-07-11 03:10:42
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables allow rules for aws

table inet filter_aws_allow {
  chain input {
    type filter hook input priority 0; policy drop;
    ip saddr 1.178.1.0/24 accept
    ip saddr 1.178.4.0/22 accept
    ip saddr 1.178.8.0/22 accept
    ip saddr 1.178.16.0/20 accept
    ip saddr 1.178.64.0/23 accept
    ip saddr 1.178.72.0/21 accept
    ip saddr 1.178.86.0/24 accept
    ip saddr 1.178.88.0/21 accept
    ip saddr 1.178.100.0/22 accept
    ip saddr 1.178.172.0/23 accept
    ip saddr 1.178.174.0/24 accept
    ip saddr 1.179.2.0/23 accept
    ip saddr 1.179.14.0/23 accept
    ip saddr 1.179.60.0/23 accept
… (3761 more lines)

// nftables_aws_deny.conf

DOWNLOAD ↓ ·

# Aws IP Ranges
# Updated: 2026-07-11 03:10:42
# Source: https://github.com/rezmoss/cloud-provider-ip-addresses
# License: https://github.com/rezmoss/cloud-provider-ip-addresses/LICENSE
# This file is generated automatically. Do not edit it directly.
# Updates daily at 02:00 UTC
# nftables deny rules for aws

table inet filter_aws_deny {
  chain input {
    type filter hook input priority 0; policy accept;
    ip saddr 1.178.1.0/24 drop
    ip saddr 1.178.4.0/22 drop
    ip saddr 1.178.8.0/22 drop
    ip saddr 1.178.16.0/20 drop
    ip saddr 1.178.64.0/23 drop
    ip saddr 1.178.72.0/21 drop
    ip saddr 1.178.86.0/24 drop
    ip saddr 1.178.88.0/21 drop
    ip saddr 1.178.100.0/22 drop
    ip saddr 1.178.172.0/23 drop
    ip saddr 1.178.174.0/24 drop
    ip saddr 1.179.2.0/23 drop
    ip saddr 1.179.14.0/23 drop
    ip saddr 1.179.60.0/23 drop
… (3761 more lines)